Automated identification of phishing, phony and malicious web sites

Abstract

A method and system for automated identification of phishing, phony, and malicious web sites are disclosed. According to one embodiment, a computer implemented method, comprises receiving a first input, the first input including a universal resource locator (URL) for a webpage. A second input is received, the second input including feedback information related to the webpage, the feedback information including an indication designating the webpage as safe or unsafe. A third input is received from a database, the third input including reputation information related to the webpage. Data is extracted from the webpage. A safety status is determined for the webpage, including whether the webpage is hazardous by using a threat score for the webpage and the second input, wherein calculating the threat score includes analyzing the extracted data from the webpage. The safety status for the webpage is reported.

Description

[0001]The present application claims the benefit of and priority to U.S. Provisional Patent Application No. 61 / 205,261 entitled “AUTOMATED IDENTIFICATION OF PHISHING, PHONY, AND MALICIOUS WEB SITES” filed on Jan. 17, 2009, and is hereby incorporated by reference.FIELD[0002]The field of the invention relates generally to computer systems. In particular, the present method and system are directed to automated identification of phishing, phony, and malicious web sites.BACKGROUND[0003]In the field of computer security, phishing is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication. Communications purporting to be from popular social web sites, auction sites, online payment processors or IT administrators are commonly used to lure the unsuspecting public. Phishing is typically carried out by e-mail or instant messaging, and it often dir...

AI Technical Summary

Benefits of technology

[0004]A method and system for automated identification of phishing, phony, and malicious web sites are disclosed. According to one embodiment, a computer implemented method, comprises receiving a first input, the first input including a universal resource locator (URL) for a webpage. A second input is received, the second input including feedback information related to the webpage, the feedback information including an indication designating the webpage as safe or unsafe. A third input is received from a database, the third input including reputation information related to the webpage. Data is extracted from the webpage. A safety status is determined for the webpage, including whether the webpage is hazardous by using a threat score for the

Problems solved by technology

Even when using server authentication, it may require

Images